CVE-2026-0398mediumCWE-770

CVE-2026-0398: fallo de gravedad media en PowerDNS Recursor

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor

Publicada el

Seguir esta CVE+ Monitorear Recursor+ Monitorear pdns-recursor

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.4%
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Productos afectados
PowerDNS · Recursor
CVEs relacionadas — PowerDNS Recursor

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-25583HIGHCrafted responses can lead to a denial of service in Recursor if recursive forwarding is configuredEPSS 0.8%CVE-2025-30195HIGHA crafted zone can lead to an illegal memory access in the PowerDNS RecursorEPSS 0.8%CVE-2024-25590HIGHCrafted responses can lead to a denial of service due to cache inefficiencies in the RecursorEPSS 0.7%CVE-2026-33256MEDIUMUnbounded memory allocation by internal web serverEPSS 0.6%CVE-2023-26437LOWDeterred spoofing attempts can lead to authoritative servers being marked unavailableEPSS 0.6%CVE-2025-59030HIGHInsufficient validation of incoming notifies over TCP can lead to a denial of service in RecursorEPSS 0.6%